Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/36c7b9-be29-46c7-834c-3d8f39022e44/1/X9M_AXV2GdJy2u7EuNYt7CLAzTU.roa
File: X9M_AXV2GdJy2u7EuNYt7CLAzTU.roa (raw, json)
Hash identifier: j9PenSqf62MhhbYanl+E1k+slReKyXFv4PuwpI5OC38=
Subject key identifier: 5F:D3:3F:01:75:76:19:D2:72:DA:EE:C4:B8:D6:2D:EC:22:C0:CD:35
Certificate issuer: /CN=6b4b5e69148a3310c34871324bc56fe84b891dff
Certificate serial: 018657D18013FC6BBB1659E501531A4756EC
Authority key identifier: 6B:4B:5E:69:14:8A:33:10:C3:48:71:32:4B:C5:6F:E8:4B:89:1D:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0teaRSKMxDDSHEyS8Vv6EuJHf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/36c7b9-be29-46c7-834c-3d8f39022e44/1/X9M_AXV2GdJy2u7EuNYt7CLAzTU.roa
Signing time: Thu 16 Feb 2023 01:23:12 +0000
ROA not before: Thu 16 Feb 2023 01:23:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210818
IP address blocks: 212.23.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:57:d1:80:13:fc:6b:bb:16:59:e5:01:53:1a:47:56:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4b5e69148a3310c34871324bc56fe84b891dff
Validity
Not Before: Feb 16 01:23:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fd33f01757619d272daeec4b8d62dec22c0cd35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:78:55:8d:94:fd:4a:46:64:11:e2:33:b1:49:
bf:1d:b7:89:de:59:08:f0:13:4c:a4:59:c0:d3:fa:
27:1d:40:1f:a5:c5:29:e9:ee:86:d1:46:7f:09:77:
bc:b5:29:9b:da:c3:16:d0:62:d9:9c:42:b4:73:32:
bd:01:5b:3a:c0:67:66:27:6f:ef:bd:37:49:72:55:
b1:ed:cc:72:58:45:2e:3f:96:ee:12:f9:4f:70:9d:
34:dc:6f:59:fe:6b:a9:d8:f1:48:85:3d:ce:47:6b:
b9:6c:d1:a4:08:60:2c:85:dc:20:93:ef:c1:a1:2d:
77:cd:0a:bb:b7:39:b2:82:95:ae:0f:3c:81:41:7b:
ef:c5:6f:b5:70:d5:88:13:1d:5a:a9:3c:f6:79:57:
ca:cf:76:36:21:6e:97:b2:e1:81:e9:8d:21:6c:79:
2a:e2:7c:7d:bd:fc:d0:44:76:e3:93:f1:00:70:f8:
ce:db:5d:93:07:c7:97:65:2a:19:d0:59:5b:31:df:
24:8b:d0:ec:8e:4f:1a:c7:06:c5:07:df:91:51:c9:
c9:03:6a:89:00:63:c1:47:2e:00:24:96:05:c8:70:
42:a7:c2:be:95:9b:b1:1d:7a:e1:31:f1:07:06:3c:
59:9e:04:09:e1:7f:0b:66:ea:a8:7a:bf:01:60:5d:
a7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D3:3F:01:75:76:19:D2:72:DA:EE:C4:B8:D6:2D:EC:22:C0:CD:35
X509v3 Authority Key Identifier:
keyid:6B:4B:5E:69:14:8A:33:10:C3:48:71:32:4B:C5:6F:E8:4B:89:1D:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0teaRSKMxDDSHEyS8Vv6EuJHf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/36c7b9-be29-46c7-834c-3d8f39022e44/1/X9M_AXV2GdJy2u7EuNYt7CLAzTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/36c7b9-be29-46c7-834c-3d8f39022e44/1/a0teaRSKMxDDSHEyS8Vv6EuJHf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.214.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:0f:6e:c8:89:02:cc:d9:72:8b:33:a1:6b:56:43:9e:42:de:
d4:9c:72:a9:31:03:71:c4:15:a2:47:15:df:1c:73:af:fe:5b:
dd:c6:e3:3b:b4:3a:62:68:de:69:60:78:ef:56:6c:63:30:a8:
23:36:eb:f4:4e:bd:5b:f5:d8:71:51:dc:2e:2f:1f:90:82:3d:
3e:4f:76:b6:5d:7d:44:cb:aa:54:45:10:83:6a:be:9e:67:fe:
7b:20:9c:4e:dd:88:a1:ba:10:8b:16:bc:44:33:b7:a2:99:d0:
7a:b0:21:79:d5:72:20:66:93:70:73:65:6e:f4:ad:7c:e4:98:
b8:69:df:de:14:90:96:f3:f0:d5:48:c1:48:b7:b2:43:c1:a6:
4f:48:38:91:a9:8e:0f:e2:0a:9c:1a:d3:ce:06:44:da:28:98:
0b:ff:2d:98:37:72:9d:cf:f9:ab:fd:1a:61:70:06:fc:92:59:
52:5f:c1:05:f3:5f:4d:49:0a:5e:53:a2:f8:10:72:d8:f8:2f:
69:4b:cb:14:d2:7d:01:d8:ae:85:4f:3b:6c:bb:28:16:dc:39:
ff:ac:14:06:df:fb:eb:6a:4c:d9:b4:4e:c6:ef:08:a2:d4:1f:
c0:e8:46:68:48:40:9c:d5:e5:1e:0c:de:e6:39:6b:c0:ac:3f:
de:68:9e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:19 2024 by rpki-client on console-ams.rpki-client.org